% Title: Targeted Delivery of Informational Content wi^ 
Privacy Protection j^^^ 
Inventor(s): Juels ^^^k 
Serial No. 09/802,278 
Atty Docket No. RS A-044 (72 1 6/66) 
Atty/Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 1 of 6 





» Title: Targeted Delivery of Informational Content vJI^^ 
Privacy Protection ^^^^ 
Inventor(s): Juels ^^^H 
Serial No. 09/802,278 
Atty Docket No. RSA-044 (7216/66) 
Atty/Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 2 of 6 





120c 



Si 




s 3 







120a 

FIG. 2 



120b 



% 



Privacy Protection 
Inventor(s): Juels 
Serial No. 09/802,278 
Atty Docket No. RSA-044 (7216/66) 
Atty/Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 3 of 6 



% 



31 



32 



33 



34 



Q» C2, C3 * 


f 

A 




r 


Q computes r, = f (P C i) 




f 


Q 


► A 




r 


r { causes A to select adj 



35 


Q 




adi 


A 






< 







FIG. 3 



% 



Title: Targeted Delivery of Informational Content with 
Privacy Protection 
Inventor(s): Juels 
Serial No. 09/802,278 
Atty Docket No. RSA-044 (7216/66) 
Atty/Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 4 of 6 



Q, C 2 , C3 *~ 



PS 




(x b r0 (x 2 , r 2 ) (x 3 , r 3 ) 



PS 



rj causes A to select ad ri 



(xi, adi) (x 2 , ad 2 ) (x 3 , ad 3 ) 
PS « A 



adi 



Q, C 2 , C3 



PS 



FIG. 4 



% 



Title: Targeted Delivery of Informational Content with 
Privacy Protection 
f\ Inventor(s): Juels 
Serial No. 09/802,278 
Atty Docket No. RSA-044 (7216/66) 
Atty/ Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 5 of 6 



Ci,C2, C3 <4- 



Ci computes ri = f(Pci) and encrypts E y [ri] 
C2 computes T2 = f(Pc2) and encrypts Eyfo] 
C3 computes r3 = f(Pc3) and encrypts E y [r 3 ] 



51 



52 





{E y [ri],x,} 




BB 


c, 




— ► 


c 2 


{ E y [r 2 ], x 2 } 




BB 


c 3 


{ E y [r 3 ], x 3 } 


— ► 


BB 






— ► 





Servers collect Vi = { E y [rj], Xj} 



2=1 



Servers mix Vi by random secret permutation <j\ 

k 

to obtain V 2 = {r a \Q, EyWi)])} . , 

1 = 1 



Servers replace each ry in V2 with ad r j 

k 

to obtain V' 2 = {ad r , EJff\(i)])} 

i = 1 



Servers mix V 2 by random secret permutation <r 2 

k 



to obtain V 3 = {(£y[ad o2(i )], <r 2 (i')} . 



i = l 



53 



54 



55 



56 



57 



Servers apply quorum controlled asymmetric proxy re-encryption 

k 

to obtain V4 = (E yc i[ac?„], i) 

i = 1 





Eyci[ad ri ] 




C],C2, C3 < 




-;',.A 



Ci, C 2 , C3 decrypt E yC i[adn] to receive 



59 



FIG. 5 



Title: Targeted Delivery of Informational Content 
Privacy Protection 
lnventor(s): Juels 
Serial No. 09/802,278 
■ Arty Docket No. RSA-044 (7216/66) 
Atty/ Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 6 of 6 



C <- 



A 



C computes r = f(P) and encrypts E y [r] 



Ey[r,] 



C 



-> BB 



Servers encrypt ad t to generate Ui = {(j, E y [adj])}"j= 



Servers mix Ui by random secret permutation a 
to obtain U 2 = (E y [a(j)], Eyiad^]) " J=l 



Servers perform a distributed plaintext equality test to 
find E y \f] ~ E y [r] and obtain U 3 = (E y [r], E y [ad r ]) 



Servers apply quorum controlled asymmetric 
proxy re-encryption to obtain E yci [ad r ] 



c „ 


Ey C j 


[ad r ] 


A 





C decrypts E yci [ad r ] to receive ad?"' 



FIG. 6 



2031066-4 



0 
$ 
CO 
0 
HI 

ru 
c« 

-b 

m 

UJ 

q 



